contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - contrib/slapd-modules/nops/nops.c in OpenLDAP through     2.4.45, when both the nops module and the memberof     overlay are enabled, attempts to free a buffer that was     allocated on the stack, which allows remote attackers     to cause a denial of service (slapd crash) via a member     MODDN operation.(CVE-2017-17740)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An off-by-one error leading to a crash was discovered     in openldap 2.4 when processing DNS SRV messages. If     slapd was configured to use the dnssrv backend, an     attacker could crash the service with crafted DNS     responses.(CVE-2014-8182)

  - contrib/slapd-modules/nops/nops.c in OpenLDAP through     2.4.45, when both the nops module and the memberof     overlay are enabled, attempts to free a buffer that was     allocated on the stack, which allows remote attackers     to cause a denial of service (slapd crash) via a member     MODDN operation.(CVE-2017-17740)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

Security issue fixed :

  - CVE-2019-13565: Fixed an authentication bypass when     using SASL authentication and session encryption     (bsc#1143194).

  - CVE-2019-13057: Fixed an issue with delegated database     admin privileges (bsc#1143273).

  - CVE-2017-17740: When both the nops module and the member     of overlay are enabled, attempts to free a buffer that     was allocated on the stack, which allows remote     attackers to cause a denial of service (slapd crash) via     a member MODDN operation. (bsc#1073313)

Non-security issues fixed :

  - Fixed broken shebang line in     openldap_update_modules_path.sh (bsc#1114845).

  - Create files in /var/lib/ldap/ during initial start to     allow for transactional updates (bsc#1111388)

  - Fixed incorrect post script call causing tmpfiles     creation not to be run (bsc#1111388).

This update was imported from the SUSE:SLE-15:Update update project.

This update for openldap2 fixes the following issues :

Security issue fixed :

CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194).

CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273).

CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313)

Non-security issues fixed: Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845).

Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388)

Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

Security issues fixed :

CVE-2017-9287: A double free vulnerability in the mdb backend during search with page size 0 was fixed (bsc#1041764).

CVE-2017-17740: Fixed a denial of service (slapd crash) via a member MODDN operation that could have been triggered when both the nops module and the memberof overlay are enabled (bsc#1073313).

Non-security issues fixed: Fix a regression in handling of non-blocking connections (bsc#1031702)

Fix an uninitialised variable that causes startup failure (bsc#1037396)

Fix libldap leaks socket descriptors issue (bsc#1065083)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openldap2 fixes the following issues :

Security issue fixed :

CVE-2017-17740: When both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
135140	EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2020-1353)	Nessus	Huawei Local Security Checks	high
134003	EulerOS 2.0 SP8 : openldap (EulerOS-SA-2020-1169)	Nessus	Huawei Local Security Checks	high
129342	openSUSE Security Update : openldap2 (openSUSE-2019-2176)	Nessus	SuSE Local Security Checks	high
129280	openSUSE Security Update : openldap2 (openSUSE-2019-2157)	Nessus	SuSE Local Security Checks	high
129043	SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2019:2395-1)	Nessus	SuSE Local Security Checks	high
124018	SUSE SLES12 Security Update : openldap2 (SUSE-SU-2019:0931-1)	Nessus	SuSE Local Security Checks	high
119743	SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2018:4150-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2017-17740

high

Tenable Plugins

high

high

high

high

high

high

high